PT-2026-55658

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description An HMAC ambiguity in Gitea Actions Artifacts V4 signed URLs allows for cross-repository artifact reading and cross-task upload-state writing. HMAC Hash-based Message Authentication Code is a...

PT-2026-55532

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 Dell PowerProtect Data Domain LTS2026 release versions 8.6.1.0 through 8.6.1.10 Dell PowerProtect Data Domain LTS2025 release versions 8.3.1.0 through 8.3.1.30 Dell PowerProtect Data...

Microsoft Edge (Chromium) < 150.0.4078.48 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 150.0.4078.48. It is, therefore, affected by multiple vulnerabilities as referenced in the July 11, 2026 advisory. - Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a...

CVE-2026-59096

creationtimestamp| type| source ---|---|--- 2026-07-02 23:58:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppafhykwf2t 2026-07-03 15:10:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqtdc7nha2n...

CVE-2026-50721

creationtimestamp| type| source ---|---|--- 2026-07-02 23:53:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppa4jizl22w 2026-07-03 02:19:39+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mppibbebaj2x 2026-07-03 06:24:49+00:00| seen|...

CVE-2026-58466

creationtimestamp| type| source ---|---|--- 2026-07-02 23:48:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpp7tl2hjp2e 2026-07-03 15:09:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqtbvzpoz2d 2026-07-03 21:54:05+00:00| seen|...

CVE-2026-59093

creationtimestamp| type| source ---|---|--- 2026-07-02 23:32:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpp6wayahy2w 2026-07-03 15:07:07+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpqt5n3ci22k 2026-07-03 15:10:08+00:00| seen|...

CVE-2026-54998

creationtimestamp| type| source ---|---|--- 2026-07-02 23:24:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpp6hj5djk2o 2026-07-03 00:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mppaiuuxbg2b 2026-07-03 05:04:36+00:00| seen|...

CVE-2026-12472

creationtimestamp| type| source ---|---|--- 2026-07-02 22:19:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp2tifd732q...

CVE-2026-13459

creationtimestamp| type| source ---|---|--- 2026-07-02 22:17:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp2r4ufnl2d 2026-07-03 03:24:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpplvcmmnk2o...

CVE-2026-10104

creationtimestamp| type| source ---|---|--- 2026-07-02 22:16:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp2oayxuz2c 2026-07-06 18:53:05+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/116874542096751750 2026-07-13 22:00:12+00:00| seen|...

CVE-2026-57679

creationtimestamp| type| source ---|---|--- 2026-07-02 21:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoyy457if2r 2026-07-03 00:35:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppchwjyrl2b 2026-07-03 00:36:00+00:00| seen|...

CVE-2026-57625

creationtimestamp| type| source ---|---|--- 2026-07-02 21:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoynecpag2u 2026-08-01 13:44:36+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrzm2rlfad27...

CVE-2026-9563

creationtimestamp| type| source ---|---|--- 2026-07-02 21:08:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpowvb7xwa2m 2026-07-03 08:59:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq6mueyys26 2026-07-08 15:15:04+00:00| seen|...

CVE-2026-52945

creationtimestamp| type| source ---|---|--- 2026-07-02 20:13:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpottc4qdb2k...

CVE-2026-55952

creationtimestamp| type| source ---|---|--- 2026-07-02 19:21:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoqvtlhjo2o 2026-07-03 08:38:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq5hhbt5t2n 2026-07-03 09:42:35+00:00| seen|...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the inline parameter in the file download process. An attacker can execute arbitrary scripts in the context of the application's web origin by uploading a crafted HTML file and convincing a victim to open a...

GHSA-93Q6-WWJH-JC6H @asymmetric-effort/specifyjs: CSS expression sanitization is bypassable in renderToString

Finding Location: core/src/server/render-to-string.ts:307-311 CSS value sanitization stripped expression and urljavascript: using simple regex, but could be bypassed with CSS unicode escapes \65xpression, null bytes, or CSS comments exp//ression. Mitigating Factor: These CSS injection vectors onl...

CVE-2026-55118

creationtimestamp| type| source ---|---|--- 2026-07-02 18:43:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoor235rc2w 2026-07-03 07:25:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzez46vy2o 2026-07-03 08:39:20+00:00| seen|...

CVE-2026-55113

creationtimestamp| type| source ---|---|--- 2026-07-02 18:39:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpool2ytca2n 2026-07-03 07:17:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyvas46o27 2026-07-08 11:01:21+00:00| seen|...